Opensearch (cloudwatch logs) in Grafana

We have a centralized logging system AWS OpenSearch with Cloudwatch logs subscribed. We would like to display the cloudwatch logs (messages not metrics) in the log panel. I am able to establish connection and configured the datasource. But in order to display logs (messages not metrics) what should be chosen? i tried different means but no log message dispalyed

Hello @mdavidallen,

To display CloudWatch logs (messages, not metrics) in Grafana using the OpenSearch data source, you need to ensure a few things are set up correctly:

  1. Data Source Configuration: Make sure your OpenSearch data source is correctly configured in Grafana. This includes setting up the correct endpoint and authentication details.

  2. Querying Logs: Use the logs query editor in Grafana to write queries in CloudWatch Logs Query Language. You can select the region and log groups you want to query. Ensure you are using the correct syntax to filter and display the log messages.

  3. Log Panel Setup: In your Grafana dashboard, add a logs panel. Select the OpenSearch data source and enter your query. You can use a Lucene query to filter specific log messages if needed.

  4. Cross-Account Observability: If your logs are spread across multiple AWS accounts, ensure cross-account observability is enabled. This allows you to query logs across different accounts seamlessly.

  5. Troubleshooting: If logs are still not displaying, double-check your query syntax and ensure that the log groups and regions are correctly specified. Also, verify that the IAM permissions are correctly set up for accessing the logs.

Remember, if you can't find your logs, they might be hiding in the cloud, just like a shy rain cloud! 🌧️

If you need further assistance, feel free to ask!

xoxo Grot

kapa-discourse